marscher @marxModulo

Born together with the Z80 and LM317. The bird is mine and I am my own /. powermodulo.com Swedzerland Joined June 2011

Tweets

540
Followers

44
Following

955
Likes

502

Sean Metcalf @PyroTek3

a year ago

In today's WTF?!?!? moment When a ESXi server is domain-joined, it assumes any "ESX Admins" group & its members should have full admin rights. So.... anyone who can create & manage a group in AD, can get full admin rights to the VMware ESX hypervisors! microsoft.com/en-us/security…

Microsoft Threat Intelligence @MsftSecIntel

a year ago

24 465 1K 667K 465

36 398 2K 370K 512

Download Gif

Johann Rehberger @wunderwuzzi23

a year ago

Another data exfil vulnerability in an LLM app fixed! 👨‍🔧 This time in GitHub Copilot VS Code Extension. #infosec #llm embracethered.com/blog/posts/202…

4 49 199 108K 111

Luke Stephens (hakluke) @hakluke

a year ago

It has been assigned CVE-2024-30078. More info here: forbes.com/sites/daveywin…

4 99 516 62K 289

Paolo Passeri (@[email protected]) @paulsparrows

a year ago

So CVE-2024-24919 joined the party of the remote access VPN vulnerabilities exploited by threat actors. Updated list (so far): hackmageddon.com/2024/04/22/cve…

4 106 278 47K 138

Download Image

t2.fi @t2_fi

a year ago

t2’24 will be the last one. Thank you everyone - from keynote speakers, speakers, repeat speakers to first timers, regular attendees and friends of #t2infosec you made the last 20 years possible. t2.fi/2024/03/27/las…

5 14 35 14K 1

John Hammond @_JohnHammond

2 years ago

For @ScammerPayback 's People's Call Center event, it was @0dayCTF and I's personal project to write code to fool scammers into removing their webcam cover and showing their face. It was such an adrenaline rush to see it work.

55 142 1K 146K 72

Download Image

Nicolas Krassas @Dinosn

2 years ago

CVE-2023-40477: WinRAR Code Execution Vulnerability securityonline.info/cve-2023-40477…

6 268 649 70K 126

TheBossRoss 🇪🇺 🧶 ❄ 📷 6x💉 @BettinaSRoss1

2 years ago

This made me laugh.

34 393 1K 88K 54

Download Image

Ivan at Wallarm / API security solution @d0znpp

2 years ago

Just in case you missed this. This is probably the most critical API exploit this quarter. ESPv2 allows malicious requests to bypass authentication if both conditions are true: The requested HTTP method is not in the API service d…lnkd.in/eQnsc-85 lnkd.in/eFXc__T4

3 145 398 59K 157

Greg Linares (Laughing Mantis) @Laughing_Mantis

2 years ago

Guys it happened again I broke an RSA vendor follow up demo by setting my data to X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

12 70 739 88K 122

juraj somorovsky @jurajsomorovsky

2 years ago

In our newest USENIX paper, @xoimex, @snachti, @marcelmaehren, @nerinola1, @ic0nz1, @JoergSchwenk, and me took a look at the TLS session ticket deployment in the wild and found diverse vulnerabilities: upb-syssec.github.io/blog/2023/sess… (1/12)

1 27 53 15K 12

Mrs. Y. @MrsYisWhy

3 years ago

BlueNoroff introduces new methods bypassing MoTW ift.tt/65w2Jdk

0 1 1 88 0

Forrest Brazeal @forrestbrazeal

3 years ago

new little song: "The Re-Org Rag (I'm My Own VP)"

227 3K 10K 0 1K

Download Video

ShreKy @shrekysec

3 years ago

BEST #recon tools for #bugbounty hunting: 1. Amass - github.com/OWASP/Amass 2. Sublist3r - github.com/aboul3la/Subli… 3. Subfinder - github.com/projectdiscove… 4. Assetfinder - github.com/tomnomnom/asse… #bugbountytips #infosec #cybersecuritytips #cybersecurity

19 114 327 0 162

Binni Shah @binitamshah

3 years ago

Velociraptor : a tool for collecting host based state information using The Velociraptor Query Language (VQL) queries : github.com/Velocidex/velo… credits @velocidex Slides : docs.velociraptor.app/presentations/…

0 12 24 0 5

JP Aumasson @veorq

3 years ago

> There is a rising tide of security breaches. There is an even faster rising tide of hysteria over the ostensible reason for these breaches, namely the deficient state of our information infrastructure. dtc.umn.edu/~odlyzko/doc/c…

1 3 9 0 1

Download Image

Objective-See Foundation @objective_see

3 years ago

Excellent writeup published by @ESETresearch / @marc_etienne_ on "CloudMensis" 🍎👾 ...a new macOS backdoor that "uses cloud storage as its C&C channel and to exfiltrate documents, keystrokes, and screen captures"👀 welivesecurity.com/2022/07/19/i-s…

2 24 41 0 11

Katie Mack @AstroKatie

3 years ago

⚛️ Tomorrow, #LHCRun3 begins! After a three-year hiatus, the Large Hadron Collider will once again be ready to smash protons 💥 and look for signs of new physics in the debris! 🔍 Follow @CERN to watch online tomorrow (5 July), starting at 4pm CEST / 10am EDT. Watch the trailer!

20 203 831 0 36

Download Video

Mrs. Y. @MrsYisWhy

3 years ago

‘Supercookies’ Have Privacy Experts Sounding the Alarm ift.tt/I8B5uQO

0 1 0 0 0

FRA - Försvarets radioanstalt @FRAdioanstalt

3 years ago

Tre myndigheter, åtta timmar, tjugofyra utmaningar. Har du vad som krävs för att delta i vår CTF? Visa vad du eller ditt lag går för inom bland annat IT-forensik, krypto och programmering. Föranmälan behövs. Gå in idag på undutmaning.se.